This bug was fixed in the package linux-oem-5.14 - 5.14.0-1005.5 --------------- linux-oem-5.14 (5.14.0-1005.5) focal; urgency=medium * focal/linux-oem-5.14: 5.14.0-1005.5 -proposed tracker (LP: #1944905) * Packaging resync (LP: #1786013) - debian/dkms-versions -- update from kernel-versions (main/2021.09.27) * Update ADL-P dmc firmware (LP: #1945438) - drm/i915: Free all DMC payloads - drm/i915/dmc: Update to DMC v2.12 * Enable runtime power management for yellow carp XHCI (LP: #1944382) - SAUCE: usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform * e1000e extremly slow (LP: #1930754) - SAUCE: e1000e: Separate TGP board type from SPT - SAUCE: e1000e: Fixing packet loss issues on new platforms * Fix missing HDMI audio on Intel RKL (LP: #1945556) - drm/i915/audio: Use BIOS provided value for RKL HDA link * Focal update: v5.14.9 upstream stable release (LP: #1945656) - mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable() - ocfs2: drop acl cache for directories too - mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN - mm: fix uninitialized use in overcommit_policy_handler - usb: gadget: r8a66597: fix a loop in set_feature() - usb: gadget: u_audio: EP-OUT bInterval in fback frequency - usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave - usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA - usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() - cifs: Not to defer close on file when lock is set - cifs: Fix soft lockup during fsstress - cifs: fix incorrect check for null pointer in header_assemble - xen/x86: fix PV trap handling on secondary processors - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter - USB: cdc-acm: fix minor-number release - Revert "USB: bcma: Add a check for devm_gpiod_get" - binder: make sure fd closes complete - binder: fix freeze race - staging: greybus: uart: fix tty use after free - usb: isp1760: do not sleep in field register poll - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk - usb: dwc3: core: balance phy init and exit - usb: cdns3: fix race condition before setting doorbell - usb: core: hcd: Add support for deferring roothub registration - USB: serial: mos7840: remove duplicated 0xac24 device ID - USB: serial: option: add Telit LN920 compositions - USB: serial: option: remove duplicate USB device ID - USB: serial: option: add device id for Foxconn T99W265 - misc: bcm-vk: fix tty registration race - misc: genwqe: Fixes DMA mask setting - mcb: fix error handling in mcb_alloc_bus() - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest - erofs: fix up erofs_lookup tracepoint - nexthop: Fix division by zero while replacing a resilient group - btrfs: prevent __btrfs_dump_space_info() to underflow its free space - xhci: Set HCD flag to defer primary roothub registration - serial: 8250: 8250_omap: Fix RX_LVL register offset - serial: mvebu-uart: fix driver's tx_empty callback - scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE - drm/amd/pm: Update intermediate power state for SI - net: hso: fix muxed tty registration - platform/x86: amd-pmc: Increase the response register timeout - arm64: Restore forced disabling of KPTI on ThunderX - arm64: Mitigate MTE issues with str{n}cmp() - comedi: Fix memory leak in compat_insnlist() - regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name - afs: Fix page leak - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server - afs: Fix updating of i_blocks on file/dir extension - platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() - regulator: max14577: Revert "regulator: max14577: Add proper module aliases strings" - NLM: Fix svcxdr_encode_owner() - virtio-net: fix pages leaking when building skb in big mode - enetc: Fix illegal access when reading affinity_hint - enetc: Fix uninitialized struct dim_sample field usage - net: dsa: tear down devlink port regions when tearing down the devlink port on error - net: bgmac-bcma: handle deferred probe error due to mac-address - napi: fix race inside napi_enable - bnxt_en: Fix TX timeout when TX ring size is set to the smallest - net: hns3: fix change RSS 'hfunc' ineffective issue - net: hns3: fix inconsistent vf id print - net: hns3: fix misuse vf id and vport id in some logs - net: hns3: check queue id range before using - net: hns3: check vlan id before using it - net: hns3: fix a return value error in hclge_get_reset_status() - net/smc: add missing error check in smc_clc_prfx_set() - net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work - net: dsa: fix dsa_tree_setup error path - net: dsa: don't allocate the slave_mii_bus using devres - net: dsa: realtek: register the MDIO bus under devres - platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build error - kselftest/arm64: signal: Add SVE to the set of features we can check for - kselftest/arm64: signal: Skip tests if required features are missing - spi: Revert modalias changes - s390/qeth: fix NULL deref in qeth_clear_working_pool_list() - gpiolib: acpi: Make set-debounce-timeout failures non fatal - gpio: uniphier: Fix void functions to remove return value - qed: rdma - don't wait for resources under hw error recovery flow - mptcp: ensure tx skbs always have the MPTCP ext - nexthop: Fix memory leaks in nexthop notification chain listeners - nfc: st-nci: Add SPI ID matching DT compatible - net: ethernet: mtk_eth_soc: avoid creating duplicate offload entries - net: mscc: ocelot: fix forwarding from BLOCKING ports remaining enabled - net/mlx4_en: Don't allow aRFS for encapsulated packets - atlantic: Fix issue in the pm resume flow. - drm/amdkfd: map SVM range with correct access permission - drm/amdkfd: fix dma mapping leaking warning - scsi: iscsi: Adjust iface sysfs attr detection - scsi: target: Fix the pgr/alua_support_store functions - tty: synclink_gt: rename a conflicting function name - fpga: machxo2-spi: Return an error on failure - fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() - x86/fault: Fix wrong signal when vsyscall fails with pkey - nvme-tcp: fix incorrect h2cdata pdu offset accounting - nvme: keep ctrl->namespaces ordered - thermal/core: Potential buffer overflow in thermal_build_list_of_policies() - cifs: fix a sign extension bug - scsi: sd_zbc: Support disks with more than 2**32 logical blocks - scsi: ufs: Revert "Utilize Transfer Request List Completion Notification Register" - scsi: ufs: Retry aborted SCSI commands instead of completing these successfully - scsi: ufs: core: Unbreak the reset handler - scsi: qla2xxx: Restore initiator in dual mode - scsi: lpfc: Use correct scnprintf() limit - irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build - irqchip/gic-v3-its: Fix potential VPE leak on error - md: fix a lock order reversal in md_alloc - x86/asm: Fix SETZ size enqcmds() build failure - io_uring: fix race between poll completion and cancel_hash insertion - io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow - io_uring: put provided buffer meta data under memcg accounting - io_uring: don't punt files update to io-wq unconditionally - blktrace: Fix uaf in blk_trace access after removing by sysfs - net: phylink: Update SFP selected interface on advertising changes - net: macb: fix use after free on rmmod - net: stmmac: allow CSR clock of 300MHz - blk-mq: avoid to iterate over stale request - m68k: Double cast io functions to unsigned long - ipv6: delay fib6_sernum increase in fib6_add - dma-debug: prevent an error message from causing runtime problems - cpufreq: intel_pstate: Override parameters if HWP forced by BIOS - bpf: Add oversize check before call kvcalloc() - xen/balloon: use a kernel thread instead a workqueue - nvme-multipath: fix ANA state updates when a namespace is not present - nvme-rdma: destroy cm id before destroy qp to avoid use after free - sparc32: page align size in arch_dma_alloc - amd/display: downgrade validation failure log level - drm/ttm: fix type mismatch error on sparc64 - block: check if a profile is actually registered in blk_integrity_unregister - block: flush the integrity workqueue in blk_integrity_unregister - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd - compiler.h: Introduce absolute_pointer macro - net: i825xx: Use absolute_pointer for memcpy from fixed memory location - sparc: avoid stringop-overread errors - qnx4: avoid stringop-overread errors - parisc: Use absolute_pointer() to define PAGE0 - drm/amdkfd: make needs_pcie_atomics FW-version dependent - drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo - drm/amd/display: Link training retry fix for abort case - amd/display: enable panel orientation quirks - arm64: Mark __stack_chk_guard as __ro_after_init - alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile - net: 6pack: Fix tx timeout and slot time - spi: Fix tegra20 build with CONFIG_PM=n - libperf evsel: Make use of FD robust. - Revert drm/vc4 hdmi runtime PM changes - EDAC/synopsys: Fix wrong value type assignment for edac_mode - EDAC/dmc520: Assign the proper type to dimm->edac_mode - x86/setup: Call early_reserve_memory() earlier - thermal/drivers/int340x: Do not set a wrong tcc offset on resume - irqchip/armada-370-xp: Fix ack/eoi breakage - arm64: add MTE supported check to thread switching and syscall entry/exit - USB: serial: cp210x: fix dropped characters with CP2102 - software node: balance refcount for managed software nodes - xen/balloon: fix balloon kthread freezing - qnx4: work around gcc false positive warning bug - nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show() - usb: gadget: f_uac2: Add missing companion descriptor for feedback EP - usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval - Linux 5.14.9 * Focal update: v5.14.8 upstream stable release (LP: #1945187) - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register - PCI: aardvark: Fix reporting CRS value - console: consume APC, DM, DCS - staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() - um: fix stub location calculation - coredump: fix memleak in dump_vma_snapshot() - um: virtio_uml: fix memory leak on init failures - RDMA/hns: Enable stash feature of HIP09 - RDMA/mlx5: Fix xlt_chunk_align calculation - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ - perf test: Fix bpf test sample mismatch reporting - perf symbol: Look for ImageBase in PE file to compute .text offset - perf tools: Allow build-id with trailing zeros - staging: rtl8723bs: fix wpa_set_auth_algs() function - n64cart: fix return value check in n64cart_probe() - thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() - 9p/trans_virtio: Remove sysfs file on probe failure - pwm: ab8500: Fix register offset calculation to not depend on probe order - prctl: allow to setup brk for et_dyn executables - nilfs2: use refcount_dec_and_lock() to fix potential UAF - profiling: fix shift-out-of-bounds bugs - PM: sleep: core: Avoid setting power.must_resume to false - thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a sensor is not used - ceph: cancel delayed work instead of flushing on mdsc teardown - pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered - pwm: mxs: Don't modify HW state in .probe() after the PWM chip was registered - dmanegine: idxd: cleanup all device related bits after disabling device - dmaengine: idxd: have command status always set - dmaengine: idxd: fix wq slot allocation index check - dmaengine: idxd: fix abort status check - dmaengine: idxd: clear block on fault flag when clear wq - platform/chrome: sensorhub: Add trace events for sample - platform/chrome: cros_ec_trace: Fix format warnings - s390/entry: make oklabel within CHKSTG macro local - SUNRPC: don't pause on incomplete allocation - math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead of selecting it - init: move usermodehelper_enable() to populate_rootfs() - Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH - tools/bootconfig: Fix tracing_on option checking in ftrace2bconf.sh - tracing/boot: Fix to loop on only subkeys - thermal/core: Fix thermal_cooling_device_register() prototype - drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() - dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER - dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER - parisc: Move pci_dev_is_behind_card_dino to where it is used - iommu/amd: Relocate GAMSup check to early_enable_iommus - iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm() - iommu/vt-d: Fix a deadlock in intel_svm_drain_prq() - arm64: mm: limit linear region to 51 bits for KVM in nVHE mode - drm/ttm: Fix a deadlock if the target BO is not idle during swap - of: property: Disable fw_devlink DT support for X86 - riscv: dts: microchip: mpfs-icicle: Fix serial console - dmaengine: idxd: depends on !UML - dmaengine: sprd: Add missing MODULE_DEVICE_TABLE - cxl: Move cxl_core to new directory - cxl/pci: Introduce cdevm_file_operations - dmaengine: ioat: depends on !UML - dmaengine: xilinx_dma: Set DMA mask for coherent APIs - s390: add kmemleak annotation in stack_alloc() - ASoC: audio-graph: respawn Platform Support - ACPI: PM: s2idle: Run both AMD and Microsoft methods if both are supported - ceph: fix memory leak on decode error in ceph_handle_caps - ceph: request Fw caps before updating the mtime in ceph_write_iter - ceph: remove the capsnaps when removing caps - ceph: lockdep annotations for try_nonblocking_invalidate - s390/unwind: use current_frame_address() to unwind current task - btrfs: update the bdev time directly when closing - btrfs: delay blkdev_put until after the device remove - btrfs: fix lockdep warning while mounting sprout fs - nilfs2: fix memory leak in nilfs_sysfs_create_device_group - nilfs2: fix NULL pointer in nilfs_##name##_attr_release - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group - thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int - habanalabs: fix nullifying of destroyed mmu pgt pool - drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address - drm/amd/display: Fix memory leak reported by coverity - drm/amdgpu: fix fdinfo race with process exit - habanalabs: add validity check for event ID received from F/W - habanalabs: fix mmu node address resolution in debugfs - habanalabs: add "in device creation" status - habanalabs: cannot sleep while holding spinlock - pwm: img: Don't modify HW state in .remove() callback - pwm: rockchip: Don't modify HW state in .remove() callback - pwm: stm32-lp: Don't modify HW state in .remove() callback - nvmet: fixup buffer overrun in nvmet_subsys_attr_serial() - block: genhd: don't call blkdev_show() with major_names_lock held - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() - blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues - rtc: rx8010: select REGMAP_I2C - sched/idle: Make the idle timer expire in hard interrupt context - cifs: properly invalidate cached root handle when closing it - io_uring: fix off-by-one in BUILD_BUG_ON check of __REQ_F_LAST_BIT - selinux,smack: fix subjective/objective credential use mixups - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV - Linux 5.14.8 * Focal update: v5.14.7 upstream stable release (LP: #1945185) - net: stmmac: fix MAC not working when system resume back with WoL active - swiotlb-xen: avoid double free - swiotlb-xen: fix late init retry - xen: reset legacy rtc flag for PV domU - xen: fix usage of pmd_populate in mremap for pv guests - bnx2x: Fix enabling network interfaces without VFs - arm64/sve: Use correct size when reinitialising SVE state - PM: base: power: don't try to use non-existing RTC for storing data - PCI: Add AMD GPU multi-function power dependencies - drm/amd/display: Get backlight from PWM if DMCU is not initialized - drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3 - drm/amd/display: Fix white screen page fault for gpuvm - drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound driver - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 - drm/amdgpu: use IS_ERR for debugfs APIs - drm/amdgpu: fix use after free during BO move - drm/amdgpu: add amdgpu_amdkfd_resume_iommu - drm/amdgpu: move iommu_resume before ip init/resume - drm/amd/pm: fix the issue of uploading powerplay table - drm/amdkfd: separate kfd_iommu_resume from kfd_resume - drm/radeon: pass drm dev radeon_agp_head_init directly - io_uring: allow retry for O_NONBLOCK if async is supported - drm/etnaviv: return context from etnaviv_iommu_context_get - drm/etnaviv: put submit prev MMU context when it exists - drm/etnaviv: stop abusing mmu_context as FE running marker - drm/etnaviv: keep MMU context across runtime suspend/resume - drm/etnaviv: exec and MMU state is lost when resetting the GPU - drm/etnaviv: fix MMU context leak on GPU reset - drm/etnaviv: reference MMU context when setting up hardware state - drm/etnaviv: add missing MMU context put when reaping MMU mapping - s390/sclp: fix Secure-IPL facility detection - net: qrtr: revert check in qrtr_endpoint_post() - x86/pat: Pass valid address to sanitize_phys() - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries - x86/mce: Avoid infinite loop for copy from user recovery - tipc: fix an use-after-free issue in tipc_recvmsg - ethtool: Fix rxnfc copy to user buffer overflow - net: remove the unnecessary check in cipso_v4_doi_free - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert - net-caif: avoid user-triggerable WARN_ON(1) - ptp: dp83640: don't define PAGE0 - net/l2tp: Fix reference count leak in l2tp_udp_recv_core - r6040: Restore MDIO clock frequency after MAC reset - tipc: increase timeout in tipc_sk_enqueue() - drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused - rtc: cmos: Disable irq around direct invocation of cmos_interrupt() - drm/i915/dp: return proper DPRX link training result - perf machine: Initialize srcline string member in add_location struct - net/mlx5: FWTrace, cancel work on alloc pd error flow - net/mlx5: Fix potential sleeping in atomic context - net: stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume - igc: fix tunnel offloading - nvme-tcp: fix io_work priority inversion - powerpc/64s: system call scv tabort fix for corrupt irq soft-mask state - events: Reuse value read using READ_ONCE instead of re-reading it - net: ipa: initialize all filter table slots - gen_compile_commands: fix missing 'sys' package - vhost_net: fix OoB on sendmsg() failure. - net/af_unix: fix a data-race in unix_dgram_poll - net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup - x86/uaccess: Fix 32-bit __get_user_asm_u64() when CC_HAS_ASM_GOTO_OUTPUT=y - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() - selftest: net: fix typo in altname test - qed: Handle management FW error - udp_tunnel: Fix udp_tunnel_nic work-queue type - dt-bindings: arm: Fix Toradex compatible typo - ibmvnic: check failover_pending in login response - KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers - powerpc/64s: system call rfscv workaround for TM bugs - powerpc/mce: Fix access error in mce handler - s390/pci_mmio: fully validate the VMA before calling follow_pte() - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() - net: hns3: pad the short tunnel frame before sending to hardware - net: hns3: change affinity_mask to numa node range - net: hns3: disable mac in flr process - net: hns3: fix the timing issue of VF clearing interrupt sources - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP - Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from uio_hv_generic driver - net/mlx5e: Fix mutual exclusion between CQE compression and HW TS - ice: Correctly deal with PFs that do not support RDMA - net: dsa: qca8k: fix kernel panic with legacy mdio mapping - net: dsa: lantiq_gswip: Add 200ms assert delay - net: hns3: fix the exception when query imp info - nvme: avoid race in shutdown namespace removal - blkcg: fix memory leak in blk_iolatency_init - net: dsa: flush switchdev workqueue before tearing down CPU/DSA ports - mlxbf_gige: clear valid_polarity upon open - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation - remoteproc: qcom: wcnss: Fix race with iris probe - mfd: db8500-prcmu: Adjust map to reality - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms - fuse: fix use after free in fuse_read_interrupt() - PCI: tegra194: Fix handling BME_CHGED event - PCI: tegra194: Fix MSI-X programming - PCI: tegra: Fix OF node reference leak - mfd: Don't use irq_create_mapping() to resolve a mapping - PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe() - riscv: fix the global name pfn_base confliction error - KVM: arm64: Make hyp_panic() more robust when protected mode is enabled - tracing/probes: Reject events which have the same name of existing one - PCI: cadence: Use bitfield for *quirk_retrain_flag* instead of bool - PCI: cadence: Add quirk flag to set minimum delay in LTSSM Detect.Quiet state - PCI: j721e: Add PCIe support for J7200 - PCI: j721e: Add PCIe support for AM64 - PCI: Add ACS quirks for Cavium multi-function devices - watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if appropriate - octeontx2-af: Add additional register check to rvu_poll_reg() - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 - flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common() - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 - block, bfq: honor already-setup queue merges - PCI: ibmphp: Fix double unmap of io_mem - loop: reduce the loop_ctl_mutex scope - ethtool: Fix an error code in cxgb2.c - NTB: Fix an error code in ntb_msit_probe() - NTB: perf: Fix an error code in perf_setup_inbuf() - stmmac: dwmac-loongson:Fix missing return value - net: phylink: add suspend/resume support - mfd: axp20x: Update AXP288 volatile ranges - backlight: ktd253: Stabilize backlight - PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges' - PCI: iproc: Fix BCMA probe resource handling - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex - KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and 16K page size - PCI: Fix pci_dev_str_match_path() alloc while atomic bug - mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set - tracing/boot: Fix a hist trigger dependency for boot time tracing - mtd: mtdconcat: Judge callback existence based on the master - mtd: mtdconcat: Check _read, _write callbacks existence before assignment - KVM: arm64: Fix read-side race on updates to vcpu reset state - KVM: arm64: Handle PSCI resets before userspace touches vCPU state - PCI/PTM: Remove error message at boot - PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n - watchdog: Fix NULL pointer dereference when releasing cdev - mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' - ARC: export clear_user_page() for modules - perf config: Fix caching and memory leak in perf_home_perfconfig() - perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} - perf bench inject-buildid: Handle writen() errors - gpio: mpc8xxx: Fix a resources leak in the error handling path of 'mpc8xxx_probe()' - gpio: mpc8xxx: Fix a potential double iounmap call in 'mpc8xxx_probe()' - gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code and avoid a leak - io_uring: retry in case of short read on block device - net: dsa: tag_rtl4_a: Fix egress tags - tools build: Fix feature detect clean for out of source builds - mptcp: fix possible divide by zero - selftests: mptcp: clean tmp files in simult_flows - net: hso: add failure handler for add_net_device - net: dsa: b53: Fix calculating number of switch ports - net: dsa: b53: Set correct number of ports in the DSA struct - mptcp: Only send extra TCP acks in eligible socket states - netfilter: socket: icmp6: fix use-after-scope - fq_codel: reject silly quantum parameters - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom - iwlwifi: move get pnvm file name to a separate function - iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()' - ip_gre: validate csum_start only on pull - net: dsa: b53: Fix IMP port setup on BCM5301x - bnxt_en: fix stored FW_PSID version masks - bnxt_en: Fix asic.rev in devlink dev info command - bnxt_en: Fix possible unintended driver initiated error recovery - ip6_gre: Revert "ip6_gre: add validation for csum_start" - mfd: lpc_sch: Rename GPIOBASE to prevent build error - cxgb3: fix oops on module removal - net: renesas: sh_eth: Fix freeing wrong tx descriptor - bnxt_en: Fix error recovery regression - net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports() - s390/bpf: Fix optimizing out zero-extensions - s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant - s390/bpf: Fix branch shortening during codegen pass - Linux 5.14.7 * Focal update: v5.14.6 upstream stable release (LP: #1945183) - Makefile: use -Wno-main in the full kernel tree - rtc: tps65910: Correct driver module alias - io_uring: place fixed tables under memcg limits - io_uring: add ->splice_fd_in checks - io_uring: fix io_try_cancel_userdata race for iowq - io-wq: fix wakeup race when adding new work - io-wq: fix race between adding work and activating a free worker - btrfs: use delalloc_bytes to determine flush amount for shrink_delalloc - btrfs: wake up async_delalloc_pages waiters after submit - btrfs: wait on async extents when flushing delalloc - btrfs: reduce the preemptive flushing threshold to 90% - btrfs: do not do preemptive flushing if the majority is global rsv - btrfs: zoned: fix block group alloc_offset calculation - btrfs: zoned: suppress reclaim error message on EAGAIN - btrfs: fix upper limit for max_inline for page size 64K - btrfs: reset replace target device to allocation state on close - btrfs: zoned: fix double counting of split ordered extent - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN - powerpc/perf/hv-gpci: Fix counter value parsing - xen: fix setting of max_pfn in shared_info - 9p/xen: Fix end of loop tests for list_for_each_entry - ceph: fix dereference of null pointer cf - Input: elan_i2c - reduce the resume time for controller in Whitebox - selftests/ftrace: Fix requirement check of README file - tools/thermal/tmon: Add cross compiling support - clk: socfpga: agilex: fix the parents of the psi_ref_clk - clk: socfpga: agilex: fix up s2f_user0_clk representation - clk: socfpga: agilex: add the bypass register for s2f_usr0 clock - pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast - pinctrl: ingenic: Fix incorrect pull up/down info - pinctrl: ingenic: Fix bias config for X2000(E) - soc: mediatek: mmsys: Fix missing UFOE component in mt8173 table routing - soc: qcom: aoss: Fix the out of bound usage of cooling_devs - soc: aspeed: lpc-ctrl: Fix boundary check for mmap - soc: aspeed: p2a-ctrl: Fix boundary check for mmap - arm64: Move .hyp.rodata outside of the _sdata.._edata range - arm64: mm: Fix TLBI vs ASID rollover - arm64: head: avoid over-mapping in map_memory - arm64: Do not trap PMSNEVFR_EL1 - iio: ltc2983: fix device probe - wcn36xx: Ensure finish scan is not requested before start scan - crypto: public_key: fix overflow during implicit conversion - block: bfq: fix bfq_set_next_ioprio_data() - power: supply: max17042: handle fails of reading status register - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() - crypto: ccp - shutdown SEV firmware on kexec - spi: fsi: Reduce max transfer size to 8 bytes - VMCI: fix NULL pointer dereference when unmapping queue pair - media: uvc: don't do DMA on stack - media: rc-loopback: return number of emitters rather than error - nvmem: core: fix error handling while validating keepout regions - s390/qdio: fix roll-back after timeout on ESTABLISH ccw - s390/qdio: cancel the ESTABLISH ccw after timeout - Revert "dmaengine: imx-sdma: refine to load context only once" - dmaengine: imx-sdma: remove duplicated sdma_load_context - watchdog: iTCO_wdt: Fix detection of SMI-off case - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs - ARM: 9105/1: atags_to_fdt: don't warn about stack size - sched: Prevent balance_push() on remote runqueues - f2fs: let's keep writing IOs on SBI_NEED_FSCK - f2fs: fix to do sanity check for sb/cp fields correctly - PCI/portdrv: Enable Bandwidth Notification only if port supports it - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure - PCI: xilinx-nwl: Enable the clock through CCF - PCI: aardvark: Configure PCIe resources from 'ranges' DT property - PCI: aardvark: Fix checking for PIO status - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response - PCI: aardvark: Fix masking and unmasking legacy INTx interrupts - f2fs: compress: fix to set zstd compress level correctly - RDMA/rtrs: move wr_cnt from rtrs_srv_con to rtrs_con - RDMA/rtrs: Enable the same selective signal for heartbeat and IO - RDMA/rtrs: Move sq_wr_avail to rtrs_con - HID: input: do not report stylus battery state as "full" - clk: renesas: rzg2l: Fix off-by-one check in rzg2l_cpg_clk_src_twocell_get() - f2fs: quota: fix potential deadlock - pinctrl: armada-37xx: Correct PWM pins definitions - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND - clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types - IB/hfi1: Adjust pkey entry in index 0 - RDMA/iwcm: Release resources if iw_cm module initialization fails - docs: Fix infiniband uverbs minor number - scsi: BusLogic: Use %X for u32 sized integer rather than %lX - pinctrl: samsung: Fix pinctrl bank pin count - f2fs: do not submit NEW_ADDR to read node block - f2fs: turn back remapped address in compressed page endio - f2fs: fix wrong checkpoint_changed value in f2fs_remount() - vfio: Use config not menuconfig for VFIO_NOIOMMU - scsi: ufs: Fix memory corruption by ufshcd_read_desc_param() - scsi: ufs: Use DECLARE_COMPLETION_ONSTACK() where appropriate - scsi: ufs: Fix the SCSI abort handler - cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards - powerpc/stacktrace: Include linux/delay.h - RDMA/hns: Don't overwrite supplied QP attributes - RDMA/efa: Remove double QP type assignment - RDMA/mlx5: Delete not-available udata check - cpuidle: pseries: Mark pseries_idle_proble() as __init - f2fs: reduce the scope of setting fsck tag when de->name_len is zero - openrisc: don't printk() unconditionally - dma-debug: fix debugfs initialization order - xprtrdma: Put rpcrdma_reps before waking the tear-down completion - NFSv4/pNFS: Fix a layoutget livelock loop - NFSv4/pNFS: Always allow update of a zero valued layout barrier - NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid - SUNRPC: Fix potential memory corruption - SUNRPC/xprtrdma: Fix reconnection locking - sunrpc: Fix return value of get_srcport() - scsi: ufs: Fix unsigned int compared with less than zero - scsi: ufshcd: Fix device links when BOOT WLUN fails to probe - scsi: fdomain: Fix error return code in fdomain_probe() - pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() - powerpc/numa: Consider the max NUMA node for migratable LPAR - vfio/mbochs: Fix missing error unwind of mbochs_used_mbytes - platform/x86: ISST: Fix optimization with use of numa - scsi: smartpqi: Fix an error code in pqi_get_raid_map() - scsi: qedi: Fix error codes in qedi_alloc_global_queues() - scsi: qedf: Fix error codes in qedf_alloc_global_queues() - powerpc/config: Fix IPV6 warning in mpc855_ads - powerpc/config: Renable MTD_PHYSMAP_OF - f2fs: fix to keep compatibility of fault injection interface - iommu/vt-d: Update the virtual command related registers - RDMA/hns: Fix return in hns_roce_rereg_user_mr() - HID: amd_sfh: Fix period data field to enable sensor - HID: i2c-hid: Fix Elan touchpad regression - HID: thrustmaster: clean up Makefile and adapt quirks - RDMA/hns: Ownerbit mode add control field - clk: imx8mm: use correct mux type for clkout path - clk: imx8m: fix clock tree update of TF-A managed clocks - KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines - scsi: ufs: ufs-exynos: Fix static checker warning - KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live - powerpc/perf: Fix the check for SIAR value - RDMA/hns: Fix incorrect lsn field - RDMA/hns: Bugfix for data type of dip_idx - RDMA/hns: Bugfix for the missing assignment for dip_idx - RDMA/hns: Bugfix for incorrect association between dip_idx and dgid - platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call - powerpc/smp: Fix a crash while booting kvm guest with nr_cpus=2 - powerpc/smp: Update cpu_core_map on all PowerPc systems - RDMA/hns: Fix query destination qpn - RDMA/hns: Fix QP's resp incomplete assignment - fscache: Fix cookie key hashing - clk: ralink: avoid to set 'CLK_IS_CRITICAL' flag for gates - clk: at91: clk-generated: Limit the requested rate to our range - KVM: PPC: Fix clearing never mapped TCEs in realmode - soc: mediatek: cmdq: add address shift in jump - f2fs: fix to account missing .skipped_gc_rwsem - f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() - f2fs: fix to unmap pages from userspace process in punch_hole() - f2fs: deallocate compressed pages when error happens - f2fs: should put a page beyond EOF when preparing a write - MIPS: Malta: fix alignment of the devicetree buffer - kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y - userfaultfd: prevent concurrent API initialization - drm/vmwgfx: Fix subresource updates with new contexts - drm/vmwgfx: Fix some static checker warnings - drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET - drm/ttm: Fix multihop assert on eviction. - drm/omap: Follow implicit fencing in prepare_fb - drm/amdgpu: Fix amdgpu_ras_eeprom_init() - drm/amdgpu: Fix koops when accessing RAS EEPROM - drm: vc4: Fix pixel-wrap issue with DVP teardown - dma-buf: fix dma_resv_test_signaled test_all handling v2 - drm/panel: Fix up DT bindings for Samsung lms397kf04 - ASoC: ti: davinci-mcasp: Fix DIT mode support - ASoC: atmel: ATMEL drivers don't need HAS_DMA - media: dib8000: rewrite the init prbs logic - media: ti-vpe: cal: fix error handling in cal_camerarx_create - media: ti-vpe: cal: fix queuing of the initial buffer - libbpf: Fix reuse of pinned map on older kernel - drm/vkms: Let shadow-plane helpers prepare the plane's FB - x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable - crypto: mxs-dcp - Use sg_mapping_iter to copy data - PCI: Use pci_update_current_state() in pci_enable_device_flags() - tipc: keep the skb in rcv queue until the whole data is read - net: phy: Fix data type in DP83822 dp8382x_disable_wol() - iio: dac: ad5624r: Fix incorrect handling of an optional regulator. - iavf: do not override the adapter state in the watchdog task - iavf: fix locking of critical sections - ARM: dts: qcom: apq8064: correct clock names - video: fbdev: kyro: fix a DoS bug by restricting user input - drm/ast: Disable fast reset after DRAM initial - netlink: Deal with ESRCH error in nlmsg_notify() - arm64: dts: qcom: Fix usb entries for SA8155p adp board - net: ipa: fix IPA v4.11 interconnect data - Smack: Fix wrong semantics in smk_access_entry() - drm: avoid blocking in drm_clients_info's rcu section - drm: serialize drm_file.master with a new spinlock - drm: protect drm_master pointers in drm_lease.c - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE - igc: Check if num of q_vectors is smaller than max before array access - usb: host: fotg210: fix the endpoint's transactional opportunities calculation - usb: host: fotg210: fix the actual_length of an iso packet - usb: gadget: u_ether: fix a potential null pointer dereference - USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() - usb: gadget: composite: Allow bMaxPower=0 if self-powered - staging: board: Fix uninitialized spinlock when attaching genpd - staging: hisilicon,hi6421-spmi-pmic.yaml: fix patternProperties - tty: serial: jsm: hold port lock when reporting modem line changes - bus: fsl-mc: fix arg in call to dprc_scan_objects() - bus: fsl-mc: fix mmio base address for child DPRCs - misc/pvpanic-pci: Allow automatic loading - selftests: firmware: Fix ignored return val of asprintf() warn - drm/amd/display: Fix timer_per_pixel unit error - media: hantro: vp8: Move noisy WARN_ON to vpu_debug - media: platform: stm32: unprepare clocks at handling errors in probe - media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe - media: atomisp: pci: fix error return code in atomisp_pci_probe() - nfp: fix return statement in nfp_net_parse_meta() - ethtool: improve compat ioctl handling - drm/amd/display: Fixed hardware power down bypass during headless boot - drm/amdgpu: Fix a printing message - drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex - bpf/tests: Fix copy-and-paste error in double word test - bpf/tests: Do not PASS tests without actually testing the result - drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit - arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names - video: fbdev: asiliantfb: Error out if 'pixclock' equals zero - video: fbdev: kyro: Error out if 'pixclock' equals zero - video: fbdev: riva: Error out if 'pixclock' equals zero - net: ipa: fix ipa_cmd_table_valid() - net: ipa: always validate filter and route tables - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() - flow_dissector: Fix out-of-bounds warnings - s390/jump_label: print real address in a case of a jump label bug - s390: make PCI mio support a machine flag - serial: 8250: Define RX trigger levels for OxSemi 950 devices - serial: max310x: Use clock-names property matching to recognize EXTCLK - xtensa: ISS: don't panic in rs_init - hvsi: don't panic on tty_register_driver failure - serial: 8250_pci: make setup_port() parameters explicitly unsigned - vt: keyboard.c: make console an unsigned int - staging: ks7010: Fix the initialization of the 'sleep_status' structure - drm/amd/display: Fix PSR command version - samples: bpf: Fix tracex7 error raised on the missing argument - libbpf: Fix race when pinning maps in parallel - ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() - drm: rcar-du: Shutdown the display on system shutdown - Bluetooth: skip invalid hci_sync_conn_complete_evt - workqueue: Fix possible memory leaks in wq_numa_init() - ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM - ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx - ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check - drm/msm/a6xx: Fix llcc configuration for a660 gpu - netfilter: nft_compat: use nfnetlink_unicast() - bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() - ARM: dts: at91: use the right property for shutdown controller - arm64: tegra: Fix Tegra194 PCIe EP compatible string - ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output - ASoC: Intel: update sof_pcm512x quirks - Bluetooth: Fix not generating RPA when required - dpaa2-switch: do not enable the DPSW at probe time - media: imx258: Rectify mismatch of VTS value - media: imx258: Limit the max analogue gain to 480 - media: imx: imx7-media-csi: Fix buffer return upon stream start failure - media: v4l2-dv-timings.c: fix wrong condition in two for-loops - media: TDA1997x: fix tda1997x_query_dv_timings() return value - media: tegra-cec: Handle errors of clk_prepare_enable() - gfs2: Fix glock recursion in freeze_go_xmote_bh - arm64: dts: qcom: sdm630: Rewrite memory map - arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration - net: ipa: fix IPA v4.9 interconnects - serial: 8250_omap: Handle optional overrun-throttle-ms property - misc: sram: Only map reserved areas in Tegra SYSRAM - ARM: dts: imx53-ppd: Fix ACHC entry - arm64: dts: qcom: ipq8074: fix pci node reg property - arm64: dts: qcom: sdm660: use reg value for memory node - arm64: dts: qcom: ipq6018: drop '0x' from unit address - arm64: dts: qcom: sdm630: don't use underscore in node name - arm64: dts: qcom: msm8994: don't use underscore in node name - arm64: dts: qcom: msm8996: don't use underscore in node name - arm64: dts: qcom: sm8250: Fix epss_l3 unit address - nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering - net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() - drm/msm: mdp4: drop vblank get/put from prepare/complete_commit - drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660 - drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock - drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers - ARM: dts: ixp4xx: Fix up bad interrupt flags - drm/amd/display: fix missing writeback disablement if plane is removed - drm/amd/display: fix incorrect CM/TF programming sequence in dwb - selftests/bpf: Fix xdp_tx.c prog section name - drm/vmwgfx: fix potential UAF in vmwgfx_surface.c - staging: rtl8723bs: fix right side of condition - Bluetooth: schedule SCO timeouts with delayed_work - Bluetooth: avoid circular locks in sco_sock_connect - drm/msm/dp: reduce link rate if failed at link training 1 - drm/msm/dp: reset aux controller after dp_aux_cmd_fifo_tx() failed. - drm/msm/dp: return correct edid checksum after corrupted edid checksum read - drm/msm/dp: do not end dp link training until video is ready - net/mlx5: Fix variable type to match 64bit - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() - drm/display: fix possible null-pointer dereference in dcn10_set_clock() - mac80211: Fix monitor MTU limit so that A-MSDUs get through - ARM: tegra: acer-a500: Remove bogus USB VBUS regulators - ARM: tegra: tamonten: Fix UART pad setting - arm64: tegra: Fix compatible string for Tegra132 CPUs - arm64: dts: imx8mm-venice-gw700x: fix mp5416 pmic config - arm64: dts: imx8mm-venice-gw700x: fix invalid pmic pin config - arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS - arm64: dts: ls1046a: fix eeprom entries - nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data - nvme: code command_id with a genctr for use-after-free validation - Bluetooth: Fix handling of LE Enhanced Connection Complete - Bluetooth: Fix race condition in handling NOP command - opp: Don't print an error if required-opps is missing - serial: sh-sci: fix break handling for sysrq - iomap: pass writeback errors to the mapping - tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD - locking/rtmutex: Set proper wait context for lockdep - rpc: fix gss_svc_init cleanup on failure - iavf: use mutexes for locking of critical sections - selftests/bpf: Correctly display subtest skip status - selftests/bpf: Fix flaky send_signal test - hwmon: (pmbus/ibm-cffps) Fix write bits for LED control - staging: rts5208: Fix get_ms_information() heap buffer size - selftests: nci: Fix the code for next nlattr offset - selftests: nci: Fix the wrong condition - net: Fix offloading indirect devices dependency on qdisc order creation - kselftest/arm64: mte: Fix misleading output when skipping tests - kselftest/arm64: pac: Fix skipping of tests on systems without PAC - ASoC: rsnd: adg: clearly handle clock error / NULL case - gfs2: Don't call dlm after protocol is unmounted - usb: chipidea: host: fix port index underflow and UBSAN complains - lockd: lockd server-side shouldn't set fl_ops - drm/exynos: Always initialize mapping in exynos_drm_register_dma() - rtl8xxxu: Fix the handling of TX A-MPDU aggregation - rtw88: use read_poll_timeout instead of fixed sleep - rtw88: wow: build wow function only if CONFIG_PM is on - rtw88: wow: fix size access error of probe request - octeontx2-pf: Fix NIX1_RX interface backpressure - m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch - btrfs: remove racy and unnecessary inode transaction update when using no- holes - btrfs: tree-log: check btrfs_lookup_data_extent return value - soundwire: intel: fix potential race condition during power down - ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER - ASoC: Intel: Skylake: Fix passing loadable flag for module - of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS - mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP - mmc: sdhci-of-arasan: Check return value of non-void funtions - mmc: core: Avoid hogging the CPU while polling for busy in the I/O err path - mmc: core: Avoid hogging the CPU while polling for busy for mmc ioctls - mmc: core: Avoid hogging the CPU while polling for busy after I/O writes - mmc: rtsx_pci: Fix long reads when clock is prescaled - selftests/bpf: Enlarge select() timeout for test_maps - mmc: core: Return correct emmc response in case of ioctl error - octeontx2-pf: cleanup transmit link deriving logic - samples: pktgen: fix to print when terminated normally - cifs: fix wrong release in sess_alloc_buffer() failed path - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" - usb: dwc3: imx8mp: request irq after initializing dwc3 - usb: musb: musb_dsps: request_irq() after initializing musb - usbip: give back URBs for unsent unlink requests during cleanup - usbip:vhci_hcd USB port can get stuck in the disabled state - usb: xhci-mtk: fix use-after-free of mtk->hcd - usb: xhci-mtk: Do not use xhci's virt_dev in drop_endpoint - ASoC: rockchip: i2s: Fix regmap_ops hang - ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B - ASoC: soc-pcm: protect BE dailink state changes in trigger - drm/amdkfd: Account for SH/SE count when setting up cu masks. - nfs: don't atempt blocking locks on nfs reexports - nfsd: fix crash on LOCKT on reexported NFSv3 - iwlwifi: pcie: free RBs during configure - iwlwifi: mvm: Do not use full SSIDs in 6GHz scan - iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed - iwlwifi: mvm: avoid static queue number aliasing - iwlwifi: mvm: Fix umac scan request probe parameters - iwlwifi: mvm: fix access to BSS elements - iwlwifi: fw: correctly limit to monitor dump - iwlwifi: mvm: don't schedule the roc_done_wk if it is already running - iwlwifi: mvm: Fix scan channel flags settings - net/mlx5: DR, fix a potential use-after-free bug - net/mlx5: DR, Enable QP retransmission - usb: isp1760: fix memory pool initialization - usb: isp1760: fix qtd fill length - usb: isp1760: write to status and address register - usb: isp1760: use the right irq status bit - usb: isp1760: otg control register access - parport: remove non-zero check on count - selftests/bpf: Fix potential unreleased lock - wcn36xx: Fix missing frame timestamp for beacon/probe-resp - ath9k: fix OOB read ar9300_eeprom_restore_internal - ath9k: fix sleeping in atomic context - net: fix NULL pointer reference in cipso_v4_doi_free - fix array-index-out-of-bounds in taprio_change - net: w5100: check return value after calling platform_get_resource() - net: hns3: clean up a type mismatch warning - parisc: fix crash with signals and alloca - parisc: Fix compile failure when building 64-bit kernel natively - printk/console: Check consistent sequence number when handling race in console_unlock() - ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() - scsi: BusLogic: Fix missing pr_cont() use - scsi: qla2xxx: Changes to support kdump kernel - scsi: qla2xxx: Sync queue idx with queue_pair_map idx - mtd: rawnand: intel: Fix error handling in probe - cpufreq: powernv: Fix init_chip_info initialization in numa=off - s390/pv: fix the forcing of the swiotlb - s390/topology: fix topology information when calling cpu hotplug notifiers - mm: fix panic caused by __page_handle_poison() - hugetlb: fix hugetlb cgroup refcounting during vma split - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() - mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled - mm/hugetlb: initialize hugetlb_usage in mm_init - mm,vmscan: fix divide by zero in get_scan_count - mm/page_alloc.c: avoid accessing uninitialized pcp page migratetype - mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task - memcg: enable accounting for pids in nested pid namespaces - libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind - platform/chrome: cros_ec_proto: Send command again when timeout occurs - lib/test_stackinit: Fix static initializer test - net: dsa: lantiq_gswip: fix maximum frame length - net: stmmac: Fix overall budget calculation for rxtx_napi - drm/mgag200: Select clock in PLL update functions - drm/msi/mdp4: populate priv->kms in mdp4_kms_init - drm/dp_mst: Fix return code on sideband message failure - drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv - drm/amdgpu: Fix BUG_ON assert - drm/amdgpu: Enable S/G for Yellow Carp - drm/amdgpu: Fix a deadlock if previous GEM object allocation fails - drm/amd/display: Update number of DCN3 clock states - drm/amd/display: Update bounding box states (v2) - drm/amdkfd: drop process ref count when xnack disable - drm/amd/display: setup system context for APUs - drm/msm/disp/dpu1: add safe lut config in dpu driver - drm/ttm: Fix ttm_bo_move_memcpy() for subclassed struct ttm_resource - drm/panfrost: Simplify lock_region calculation - drm/panfrost: Use u64 for size in lock_region - drm/panfrost: Clamp lock region to Bifrost minimum - tracing/osnoise: Fix missed cpus_read_unlock() in start_per_cpu_kthreads() - Linux 5.14.6 -- Timo Aaltonen